This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.mft File: _JEop2LO62tZ9UMVaLwT_OQauhI.mft (raw, json) Hash identifier: xK6QfEnS3uVXNlZCDA6qLGi3jKC9XK8S2kFsS7yd494= Subject key identifier: A8:60:D8:80:50:72:A5:98:F8:DB:39:15:33:1F:BD:8F:DC:1E:4D:CC Authority key identifier: FC:91:28:A7:62:CE:EB:6B:59:F5:43:15:68:BC:13:FC:E4:1A:BA:12 Certificate issuer: /CN=fc9128a762ceeb6b59f5431568bc13fce41aba12 Certificate serial: 019BF5ABBBE5B370800E6D0E8FC0E4EE88D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JEop2LO62tZ9UMVaLwT_OQauhI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.mft Manifest number: 064C Signing time: Sun 25 Jan 2026 15:00:31 +0000 Manifest this update: Sun 25 Jan 2026 15:00:31 +0000 Manifest next update: Mon 26 Jan 2026 15:00:31 +0000 Files and hashes: 1: P7OFGXCIuiy34hkSHUMLMJ7IF9g.roa (hash: V7Zx2KHScFSsYI93Yh9xQVZupBOKg8yMrPbW/W8v9Sg=) 2: _JEop2LO62tZ9UMVaLwT_OQauhI.crl (hash: JD8zSbsom3uP2zPj63FXJGVdSPHf919lKuPpubh/WTE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.mft rsync://rpki.ripe.net/repository/DEFAULT/_JEop2LO62tZ9UMVaLwT_OQauhI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ab:bb:e5:b3:70:80:0e:6d:0e:8f:c0:e4:ee:88:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc9128a762ceeb6b59f5431568bc13fce41aba12 Validity Not Before: Jan 25 15:00:31 2026 GMT Not After : Jan 26 15:00:31 2026 GMT Subject: CN=a860d8805072a598f8db3915331fbd8fdc1e4dcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:1d:00:4a:ca:56:d2:d2:5a:70:d6:3a:1c:d1: 4d:94:a3:cd:4c:ac:54:8e:07:13:12:77:15:09:d8: 97:49:19:bf:fa:45:f1:e6:21:b6:8a:a4:61:39:8a: 3d:59:02:0a:3a:ee:02:58:e7:93:c7:3b:07:7c:d0: 10:d7:a2:43:56:18:64:24:96:fc:60:f3:db:bb:a3: ee:f1:f8:1b:10:46:3c:5e:7c:5f:ec:b0:aa:60:e3: b4:98:7c:0b:25:66:0b:1f:5b:53:a6:fd:51:34:dd: 1a:24:79:29:38:cf:16:3c:78:b6:09:b8:a4:ad:05: c3:63:84:ef:f8:96:15:29:c3:6a:99:d3:58:89:62: 09:85:29:ad:b4:e9:fc:bd:91:e8:39:53:85:cc:44: 5d:a0:70:d4:bd:69:4d:27:24:ff:11:30:59:6b:5c: f5:f0:78:e2:d1:74:dd:26:47:6f:3a:89:9a:d7:f3: 54:4b:80:ac:b1:f5:8a:89:e1:a7:e3:c5:1c:8c:5e: fa:39:db:71:b3:e1:b5:92:f4:73:6e:2d:fd:df:bb: 6f:72:8e:c1:23:a0:cb:b4:c7:90:39:b6:77:29:9d: 1b:19:72:f6:96:a5:a1:69:ee:75:95:f7:72:4b:1a: be:60:40:c4:e7:74:ff:f9:14:2b:62:e9:30:70:0f: 54:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:60:D8:80:50:72:A5:98:F8:DB:39:15:33:1F:BD:8F:DC:1E:4D:CC X509v3 Authority Key Identifier: keyid:FC:91:28:A7:62:CE:EB:6B:59:F5:43:15:68:BC:13:FC:E4:1A:BA:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JEop2LO62tZ9UMVaLwT_OQauhI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:41:d1:c2:ff:f5:d2:2e:72:13:89:81:99:fa:fd:64:81:38: 3a:e2:fc:29:c9:af:96:7b:1e:3e:ad:25:77:f0:70:3a:24:a8: 90:ca:ee:71:fc:08:4b:82:d1:42:1b:08:33:08:8e:bd:a7:28: c2:65:ca:94:b3:ba:07:79:ee:69:e5:21:ee:48:5f:1b:f0:b2: ed:e9:34:a0:d1:59:c3:d6:d5:48:dc:2c:8a:e6:ec:56:fa:30: 53:5b:8d:4e:f0:81:b6:4c:df:cd:38:d8:0d:34:f3:93:5f:1c: 44:9c:d9:12:a7:df:a3:5b:76:9c:e1:9c:09:38:49:c4:6c:9f: 5f:ca:c2:e2:98:0c:27:71:dd:07:15:e0:fe:c6:d1:43:9d:5b: c8:e6:66:3d:e0:35:bb:24:5c:d3:2f:73:63:b0:74:7d:94:93: a1:76:55:26:89:19:8c:48:3a:98:10:7d:eb:2a:2b:66:bb:31: cb:51:38:07:61:8b:bf:e0:2a:49:9b:13:05:03:0d:68:df:5f: b6:89:3c:f5:f4:56:60:11:4d:f3:af:cd:2a:7c:2f:4f:c7:02: c1:67:a1:77:96:ec:e9:27:e1:91:5b:a5:67:db:6f:82:c4:24: 89:83:5a:40:24:6d:61:77:60:24:bd:b5:c2:03:53:44:f1:cb: ff:c2:9a:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1q7vls3CADm0Oj8Dk7ojYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjOTEyOGE3NjJjZWViNmI1OWY1NDMxNTY4YmMxM2ZjZTQx YWJhMTIwHhcNMjYwMTI1MTUwMDMxWhcNMjYwMTI2MTUwMDMxWjAzMTEwLwYDVQQD EyhhODYwZDg4MDUwNzJhNTk4ZjhkYjM5MTUzMzFmYmQ4ZmRjMWU0ZGNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjh0ASspW0tJacNY6HNFNlKPNTKxU jgcTEncVCdiXSRm/+kXx5iG2iqRhOYo9WQIKOu4CWOeTxzsHfNAQ16JDVhhkJJb8 YPPbu6Pu8fgbEEY8Xnxf7LCqYOO0mHwLJWYLH1tTpv1RNN0aJHkpOM8WPHi2Cbik rQXDY4Tv+JYVKcNqmdNYiWIJhSmttOn8vZHoOVOFzERdoHDUvWlNJyT/ETBZa1z1 8Hji0XTdJkdvOoma1/NUS4CssfWKieGn48UcjF76Odtxs+G1kvRzbi3937tvco7B I6DLtMeQObZ3KZ0bGXL2lqWhae51lfdySxq+YEDE53T/+RQrYukwcA9UhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKhg2IBQcqWY+Ns5FTMfvY/cHk3MMB8GA1UdIwQY MBaAFPyRKKdizutrWfVDFWi8E/zkGroSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0pFb3AyTE82MnRaOVVNVmFMd1RfT1FhdWhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8yMWU2OGMtMWM0Yy00NTU5LTllMzAt MTM1ZDcwOWI1OWUwLzEvX0pFb3AyTE82MnRaOVVNVmFMd1RfT1FhdWhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8yMWU2OGMtMWM0Yy00NTU5LTllMzAtMTM1ZDcwOWI1OWUw LzEvX0pFb3AyTE82MnRaOVVNVmFMd1RfT1FhdWhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg0HRwv/1 0i5yE4mBmfr9ZIE4OuL8KcmvlnsePq0ld/BwOiSokMrucfwIS4LRQhsIMwiOvaco wmXKlLO6B3nuaeUh7khfG/Cy7ek0oNFZw9bVSNwsiubsVvowU1uNTvCBtkzfzTjY DTTzk18cRJzZEqffo1t2nOGcCThJxGyfX8rC4pgMJ3HdBxXg/sbRQ51byOZmPeA1 uyRc0y9zY7B0fZSToXZVJokZjEg6mBB96yorZrsxy1E4B2GLv+AqSZsTBQMNaN9f tok89fRWYBFN86/NKnwvT8cCwWehd5bs6SfhkVulZ9tvgsQkiYNaQCRtYXdgJL21 wgNTRPHL/8KaMg== -----END CERTIFICATE-----Generated at Mon Jan 26 01:47:48 2026 by rpki-client